CVE-2022-32193: 
Couchbase vulnerability analysis and mitigation

A vulnerability was discovered in Couchbase Server 6.6.x through 7.x before 7.0.4 where private key may be leaked to log files during a crash of the Cluster Manager component. While performing cluster node additions, a crash of the Cluster Manager (ns_server) may lead to the private key getting leaked into the log files (Couchbase Alerts).

The vulnerability has been assigned a CVSS score of 6.3 (Medium severity). The issue occurs specifically during cluster node additions when the Cluster Manager component crashes, potentially exposing sensitive cryptographic material in log files (NVD).

If an attacker gains access to the log files containing the leaked private key, they may be able to decrypt secure network connections to the cluster. In cases where TLS is used, this could lead to the compromise of credentials for users and applications that login to the cluster (Couchbase Alerts).

The vulnerability has been fixed in Couchbase Server versions 7.0.4 and 6.6.6. Users running affected versions should upgrade to these patched versions to resolve the issue (Couchbase Alerts).